public ApiOperation(bool isExclusive, CommandTypes serialApiCommand, bool isSequenceNumberRequired)
: base(isExclusive)
{
SerialApiCommands = new CommandTypes[] { serialApiCommand };
IsSequenceNumberRequired = isSequenceNumberRequired;
SubstituteSettings = new SubstituteSettings();
}
internal SendDataFragmentedSecureTask(SecurityManagerInfo securityManagerInfo, SecurityS0CryptoProvider securityS0CryptoProvider, byte nodeId, byte[] data, TransmitOptions txOptions)
: base(false, null, false)
{
_securityManagerInfo = securityManagerInfo;
_securityS0CryptoProvider = securityS0CryptoProvider;
SubstituteSettings.SetFlag(SubstituteFlags.DenySecurity);
CommandToSecureSend = data;
NodeId = nodeId;
TxOptions = txOptions;
}
internal SendDataSecureS2Task(SecurityManagerInfo securityManagerInfo,
SecurityS2CryptoProvider securityS2CryptoProvider, SinglecastKey sckey, SpanTable spanTable, MpanTable mpanTable,
byte nodeId,
byte[] data,
TransmitOptions txOptions)
: base(false, null, false)
{
_securityManagerInfo = securityManagerInfo;
_securityS2CryptoProvider = securityS2CryptoProvider;
_mpanTable = mpanTable;
_spanTable = spanTable;
_sckey = sckey;
SubstituteSettings.SetFlag(SubstituteFlags.DenySecurity);
CommandToSecureSend = data;
NodeId = nodeId;
_peerNodeId = new InvariantPeerNodeId(_securityManagerInfo.Network.NodeId, NodeId);
TxOptions = txOptions;
_securityTestSettingsService = new SecurityTestSettingsService(_securityManagerInfo, false);
}
protected override void OnHandledInternal(DataReceivedUnit ou)
{
var destNodeId = ReceivedAchData.DestNodeId > 0 ? ReceivedAchData.DestNodeId : _securityManagerInfo.Network.NodeId;
SecuritySchemes scheme = SecuritySchemes.NONE;
InvariantPeerNodeId peerNodeId = new InvariantPeerNodeId(destNodeId, ReceivedAchData.SrcNodeId);
ou.SetNextActionItems();
if (!ou.DataFrame.IsSkippedSecurity)
{
if (_securityManagerInfo.Network.HasSecurityScheme(SecuritySchemeSet.ALLS2) && _securityManagerInfo.IsActive)
{
byte[] command = ReceivedAchData.Command;
bool isNonceReport = false;
bool isSupportedReport = false; // Only for test frame
Extensions extensions = null;
SubstituteSettings substituteSettings = null;
if (command != null && command.Length > 1)
{
bool isSubstituteDenied = false;
byte[] dataToSend = null;
bool isMulticastFrame = (ou.DataFrame.Data[2] & MULTICAST_MASK) == MULTICAST_MASK;
bool isBroadcastFrame = (ou.DataFrame.Data[2] & BROADCAST_MASK) == BROADCAST_MASK;
if (command[1] == COMMAND_CLASS_SECURITY_2.SECURITY_2_NONCE_GET.ID && (SecuritySchemes)ReceivedAchData.SecurityScheme == SecuritySchemes.NONE)
{
byte rxSequenceNumber = command[2];
if (!isMulticastFrame && !isBroadcastFrame)
{
if (handlingNonceGetFromNode != ReceivedAchData.SrcNodeId)
{
handlingNonceGetFromNode = ReceivedAchData.SrcNodeId;
var currentTxSequenceNumber = _spanTable.GetTxSequenceNumber(peerNodeId);
_spanTable.SetNonceFree(peerNodeId);
//reset MPAN for owner Id
foreach (byte groupId in _mpanTable.SelectGroupIds(ReceivedAchData.SrcNodeId))
{
_mpanTable.RemoveRecord(new NodeGroupId(ReceivedAchData.SrcNodeId, groupId));
}
dataToSend = _securityS2CryptoProvider.GenerateNonceReport(_spanTable, peerNodeId, ++currentTxSequenceNumber, rxSequenceNumber, true, false);
isNonceReport = true;
isSubstituteDenied = true;
}
}
}
else if (command[1] == COMMAND_CLASS_SECURITY_2.SECURITY_2_MESSAGE_ENCAPSULATION.ID)
{
byte rxSequenceNumber = command[2];
if (!isMulticastFrame && !isBroadcastFrame && ValidateS2MessageExtensions(command))
{
var currentTxSequenceNumber = _spanTable.GetTxSequenceNumber(peerNodeId);
_spanTable.SetNonceFree(peerNodeId);
var isMos = _securityS2CryptoProvider.CheckMpanMosForOwnerNode(_mpanTable, ReceivedAchData.SrcNodeId);
dataToSend = _securityS2CryptoProvider.GenerateNonceReport(_spanTable, peerNodeId, ++currentTxSequenceNumber, rxSequenceNumber, true, isMos);
isNonceReport = true;
isSubstituteDenied = true;
}
}
else if (command[1] == COMMAND_CLASS_SECURITY_2.SECURITY_2_NONCE_REPORT.ID && (SecuritySchemes)ReceivedAchData.SecurityScheme == SecuritySchemes.NONE)
{
if (!isMulticastFrame && !isBroadcastFrame)
{
COMMAND_CLASS_SECURITY_2.SECURITY_2_NONCE_REPORT nonceReportCmd = command;
if (_securityManagerInfo.InitializingNodeId != ReceivedAchData.SrcNodeId) // Node must be already initialized.
{
if (nonceReportCmd.properties1.sos > 0 && // Singlecast out of sync.
nonceReportCmd.receiversEntropyInput != null &&
nonceReportCmd.receiversEntropyInput.Count == 16
)
{
var rTable = _securityManagerInfo.RetransmissionTableS2;
if (rTable.ContainsKey(peerNodeId))
{
if (rTable[peerNodeId].Counter > 0)
{
_spanTable.AddOrReplace(peerNodeId,
nonceReportCmd.receiversEntropyInput.ToArray(),
_spanTable.GetTxSequenceNumber(peerNodeId),
nonceReportCmd.sequenceNumber);
dataToSend = rTable[peerNodeId].Data;
scheme = rTable[peerNodeId].SecurityScheme;
substituteSettings = rTable[peerNodeId].SubstituteSettings;
rTable[peerNodeId].Counter--;
}
else
{
rTable.Remove(peerNodeId);
_spanTable.SetNonceFree(peerNodeId);
}
}
else
{
_spanTable.SetNonceFree(peerNodeId);
}
}
if (nonceReportCmd.properties1.mos > 0) // Mutlicast out of sync.
{
var groupId = _securityS2CryptoProvider.LastSentMulticastGroupId;
extensions = new Extensions();
var nodeGroupId = new NodeGroupId(destNodeId, groupId);
if (!_mpanTable.CheckMpanExists(nodeGroupId))
{
_mpanTable.AddOrReplace(nodeGroupId, 0x55, null, _securityS2CryptoProvider.GetRandomData());
}
extensions.AddMpanExtension(_mpanTable.GetContainer(nodeGroupId).MpanState, groupId);
}
}
}
}
else if (command[1] == COMMAND_CLASS_SECURITY_2.SECURITY_2_COMMANDS_SUPPORTED_GET.ID)
{
if (!isMulticastFrame && !isBroadcastFrame)
{
scheme = (SecuritySchemes)ReceivedAchData.SecurityScheme;
if (scheme != SecuritySchemes.NONE && scheme != SecuritySchemes.S0 && _securityManagerInfo.Network.HasSecurityScheme(scheme))
{
if (!_securityManagerInfo.Network.HasSecurityScheme(ReceivedAchData.SrcNodeId, SecuritySchemeSet.ALLS2) &&
!_securityManagerInfo.Network.IsSecuritySchemesSpecified(ReceivedAchData.SrcNodeId))
{
_securityManagerInfo.Network.SetSecuritySchemes(ReceivedAchData.SrcNodeId, SecuritySchemeSet.ALL);
}
isSupportedReport = true;
var ccReport = new COMMAND_CLASS_SECURITY_2.SECURITY_2_COMMANDS_SUPPORTED_REPORT();
if (ReceivedAchData.CommandType == CommandTypes.CmdApplicationCommandHandler_Bridge &&
ReceivedAchData.DestNodeId != _securityManagerInfo.Network.NodeId)
{
ccReport.commandClass = new List <byte>(_securityManagerInfo.Network.GetVirtualSecureCommandClasses());
}
else
{
var secureCommandClasses = _securityManagerInfo.Network.GetSecureCommandClasses();
if (secureCommandClasses != null)
{
switch (scheme)
{
case SecuritySchemes.S2_UNAUTHENTICATED:
if (!_securityManagerInfo.Network.HasSecurityScheme(SecuritySchemes.S2_ACCESS) &&
!_securityManagerInfo.Network.HasSecurityScheme(SecuritySchemes.S2_AUTHENTICATED))
{
ccReport.commandClass = new List <byte>(_securityManagerInfo.Network.GetSecureCommandClasses());
}
break;
case SecuritySchemes.S2_AUTHENTICATED:
if (!_securityManagerInfo.Network.HasSecurityScheme(SecuritySchemes.S2_ACCESS))
{
ccReport.commandClass = new List <byte>(_securityManagerInfo.Network.GetSecureCommandClasses());
}
break;
case SecuritySchemes.S2_ACCESS:
ccReport.commandClass = new List <byte>(secureCommandClasses);
break;
default:
break;
}
}
}
dataToSend = ccReport;
}
}
}
if (dataToSend != null || extensions != null)
{
ApiOperation sendData = null;
if (SecuritySchemeSet.ALLS2.Contains(scheme))
{
sendData = new SendDataExOperation(ReceivedAchData.DestNodeId, ReceivedAchData.SrcNodeId, dataToSend, _securityManagerInfo.TxOptions, scheme);
}
else
{
if (ReceivedAchData.DestNodeId > 0)
{
sendData = new SendDataBridgeOperation(ReceivedAchData.DestNodeId, ReceivedAchData.SrcNodeId, dataToSend, _securityManagerInfo.TxOptions);
if (extensions != null)
{
((SendDataBridgeOperation)sendData).Extensions = extensions;
}
}
else
{
sendData = new SendDataOperation(ReceivedAchData.SrcNodeId, dataToSend, _securityManagerInfo.TxOptions);
if (extensions != null)
{
((SendDataOperation)sendData).Extensions = extensions;
}
}
}
if (substituteSettings != null)
{
sendData.SubstituteSettings = substituteSettings;
}
if (isSubstituteDenied)
{
sendData.SubstituteSettings.SetFlag(SubstituteFlags.DenySecurity);
}
sendData.CompletedCallback = (x) =>
{
var action = x as ActionBase;
if (action != null)
{
handlingNonceGetFromNode = 0;
SpecificResult.TotalCount++;
if (action.Result.State != ActionStates.Completed)
{
SpecificResult.FailCount++;
}
}
};
#region TestFrames
if (isNonceReport)
{
_securityTestSettingsService.ActivateTestPropertiesForFrame(SecurityS2TestFrames.NonceReport, sendData);
}
else if (isSupportedReport)
{
_securityTestSettingsService.ActivateTestPropertiesForFrame(SecurityS2TestFrames.CommandsSupportedReport, sendData);
}
#endregion
ou.SetNextActionItems(sendData);
}
else
{
ou.SetNextActionItems();
}
}
}
else
{
"REJECT, {0}, {1} (IsNodeSecureS2={2}, IsActive={3}"._DLOG(
_securityManagerInfo.IsInclusion,
_securityManagerInfo.Network.HasSecurityScheme(ReceivedAchData.SrcNodeId, SecuritySchemeSet.ALLS2),
_securityManagerInfo.Network.HasSecurityScheme(SecuritySchemeSet.ALLS2),
_securityManagerInfo.IsActive);
}
}
}
protected virtual void SaveDataForRetransmission(InvariantPeerNodeId peerNodeId, byte[] plainData, SubstituteSettings substituteSettings, SecuritySchemes scheme)
{
}
protected byte[] EncryptSinglecastCommandInternal(SinglecastKey sckey, SpanTable spanTable, byte senderNodeId, byte receiverNodeId, byte[] homeId, byte[] plainData, Extensions extentions, SubstituteSettings substituteSettings)
{
Extensions ext = extentions ?? new Extensions();
InvariantPeerNodeId peerNodeId = new InvariantPeerNodeId(senderNodeId, receiverNodeId);
var spanContainer = spanTable.GetContainer(peerNodeId);
var spanExtension = GetPersonalizationArray(sckey, spanContainer);
if (spanExtension != null)
{
ext.AddSpanExtension(spanExtension);
}
spanContainer.NextNonce();
spanTable.UpdateTxSequenceNumber(peerNodeId);
var iv = GetPropertyIV(spanContainer.Span);
var sequenceNumber = GetPropertySequenceNo(spanContainer.TxSequenceNumber);
var reserved = GetPropertyReserved(0);
FillExtensions(ext, true);
byte[] encryptedData = EncryptS2(sckey.CcmKey,
sequenceNumber,
plainData,
senderNodeId,
receiverNodeId,
homeId,
iv,
reserved,
ext);
if (plainData != null && encryptedData != null)
{
SaveDataForRetransmission(peerNodeId, plainData, substituteSettings, sckey.SecurityScheme);
}
return(encryptedData);
}
public byte[] EncryptSinglecastCommand(SinglecastKey sckey, SpanTable spanTable, byte senderNodeId, byte receiverNodeId, byte[] homeId, byte[] plainData, Extensions extentions, SubstituteSettings substituteSettings)
{
byte[] encryptedData = null;
InvariantPeerNodeId peerNodeId = new InvariantPeerNodeId(senderNodeId, receiverNodeId);
var spanContainer = spanTable.GetContainer(peerNodeId);
if (spanContainer != null)
{
encryptedData = EncryptSinglecastCommandInternal(sckey, spanTable, senderNodeId, receiverNodeId, homeId, plainData, extentions, substituteSettings);
}
else
{
}
return(encryptedData);
}
public byte[] TestOverrideMessageEncapsulation(SinglecastKey sckey, SpanTable spanTable, SecurityS2CryptoProvider _securityS2CryptoProvider, SubstituteSettings substituteSettings, byte nodeId, byte[] data, InvariantPeerNodeId peerNodeId, Extensions extensions, byte[] encryptedMsg, byte[] initData)
{
byte[] ret = initData;
if (TestFramesS2.ContainsKey(SecurityS2TestFrames.MessageEncapsulation))
{
var testData = data;
var testFrame = TestFramesS2[SecurityS2TestFrames.MessageEncapsulation];
if (testFrame.DelaySpecified && testFrame.Delay > 0)
{
Thread.Sleep(testFrame.Delay);
}
if (testFrame.Command != null)
{
testData = testFrame.Command;
}
if (!testFrame.IsEncryptedSpecified || testFrame.IsEncrypted)
{
if (testFrame.IsTemp)
{
if (testFrame.NetworkKey != null)
{
ActivateNetworkKeyS2CustomForNode(peerNodeId, testFrame.IsTemp, testFrame.NetworkKey);
}
else
{
ActivateNetworkKeyS2CustomForNode(peerNodeId, testFrame.IsTemp, GetActualNetworkKeyS2Temp());
}
}
else
{
if (testFrame.NetworkKey != null)
{
ActivateNetworkKeyS2CustomForNode(peerNodeId, testFrame.IsTemp, testFrame.NetworkKey);
}
}
ret = _securityS2CryptoProvider.EncryptSinglecastCommand(sckey, spanTable, Network.NodeId, nodeId, Network.HomeId, testData, extensions, substituteSettings);
}
else
{
var msgEncapCryptedData = (COMMAND_CLASS_SECURITY_2.SECURITY_2_MESSAGE_ENCAPSULATION)encryptedMsg;
msgEncapCryptedData.ccmCiphertextObject = new List <byte>(testData);
ret = msgEncapCryptedData;
}
}
return(ret);
}
protected override void SaveDataForRetransmission(InvariantPeerNodeId peerNodeId, byte[] plainData, SubstituteSettings substituteSettings, SecuritySchemes scheme)
{
var rTable = _securityManagerInfo.RetransmissionTableS2;
/* Delete when counter:
* 0 - item was retransmitted sucessfully (only one Nonce Report)
* 2 - item sent from first try sucessfully (no Nonce Reports were received)
*/
if (rTable.ContainsKey(peerNodeId) && (rTable[peerNodeId].Counter == 0 || rTable[peerNodeId].Counter == 2))
{
rTable.Remove(peerNodeId);
}
if (!rTable.ContainsKey(peerNodeId))
{
rTable.Add(peerNodeId, new RetransmissionRecord(plainData));
rTable[peerNodeId].SubstituteSettings = substituteSettings;
rTable[peerNodeId].SecurityScheme = scheme;
rTable[peerNodeId].Counter = 2;
}
else
{
rTable[peerNodeId].Data = plainData;
rTable[peerNodeId].Counter--;
}
}
public ActionToken SendDataMultiBridge(byte srcNodeId, byte[] receiverNodeIds, byte[] data, TransmitOptions transmitOptions, SubstituteSettings substituteSettings, Action <IActionItem> completedCallback)
{
SendDataMultiBridgeOperation operation = new SendDataMultiBridgeOperation(srcNodeId, receiverNodeIds, data, transmitOptions)
{
SubstituteSettings = substituteSettings
};
return(ExecuteAsync(operation, completedCallback));
}
public TransmitResult SendDataMultiBridge(byte srcNodeId, byte[] receiverNodeIds, byte[] data, TransmitOptions txOptions, SubstituteSettings substituteSettings, out ActionToken token)
{
token = SendDataMultiBridge(srcNodeId, receiverNodeIds, data, txOptions, substituteSettings, null);
return((TransmitResult)token.WaitCompletedSignal());
}
